OrgsAP Templates

createOrgAptemplate

POST
/api/v1/orgs/{org_id}/aptemplates

Create an organization AP template with AP matching rules, port configuration, Wi-Fi settings, and mesh settings.

Authorization

Authorization<token>

Preferred authentication method for automation and integrations. Send the API token in the HTTP Authorization header.

Format: Authorization: Token {apitoken}

Notes:

  • An API token generated for a specific admin has the same privileges as that admin
  • An API token is automatically removed if it is not used for more than 90 days
  • SSO admins cannot generate admin API tokens. Use organization API tokens when scoped Org/Site privileges are needed.

In: header

Path Parameters

org_id*string
Formatuuid

Request Body

application/json

Access point template configuration

ap_matching*

Rules used to select access points for this AP template

wifi?

Wi-Fi and mesh settings applied by this AP template

Response Body

curl -X POST "https://example.com/api/v1/orgs/000000ab-00ab-00ab-00ab-0000000000ab/aptemplates" \  -H "Content-Type: application/json" \  -d '{    "ap_matching": {      "enabled": true,      "rules": [        {          "match_model": "string",          "name": "string",          "port_config": {            "property1": {              "disabled": true,              "dynamic_vlan": {                "default_vlan_id": 999,                "enabled": true,                "type": "string",                "vlans": {                  "1-10": null,                  "user": null                }              },              "enable_mac_auth": false,              "forwarding": "all",              "mx_tunnel_id": "08cd7499-5841-51c8-e663-fb16b6f3b45e",              "mxtunnel_name": "string",              "port_auth": "none",              "port_vlan_id": 1,              "radius_config": {                "acct_interim_interval": 0,                "acct_servers": [                  {                    "host": "1.2.3.4",                    "keywrap_enabled": true,                    "keywrap_format": "hex",                    "keywrap_kek": "1122334455",                    "keywrap_mack": "1122334455",                    "port": 1813,                    "secret": "testing123"                  }                ],                "auth_servers": [                  {                    "host": "1.2.3.4",                    "keywrap_enabled": true,                    "keywrap_format": "hex",                    "keywrap_kek": "1122334455",                    "keywrap_mack": "1122334455",                    "port": 1812,                    "secret": "testing123"                  }                ],                "auth_servers_retries": 3,                "auth_servers_timeout": 5,                "coa_enabled": false,                "coa_port": 3799,                "network": "string",                "source_ip": "string"              },              "radsec": {                "enabled": true,                "idle_timeout": 60,                "mxcluster_ids": [                  "572586b7-f97b-a22b-526c-8b97a3f609c4"                ],                "proxy_hosts": [                  "mxedge1.local"                ],                "server_name": "radsec.abc.com",                "servers": [                  {                    "host": "1.1.1.1",                    "port": 1812                  }                ],                "use_mxedge": true,                "use_site_mxedge": false              },              "vlan_id": 9,              "vlan_ids": "1, 10, 50",              "wxtunnel_id": "7dae216d-7c98-a51b-e068-dd7d477b7216",              "wxtunnel_remote_id": "wifiguest"            },            "property2": {              "disabled": true,              "dynamic_vlan": {                "default_vlan_id": 999,                "enabled": true,                "type": "string",                "vlans": {                  "1-10": null,                  "user": null                }              },              "enable_mac_auth": false,              "forwarding": "all",              "mx_tunnel_id": "08cd7499-5841-51c8-e663-fb16b6f3b45e",              "mxtunnel_name": "string",              "port_auth": "none",              "port_vlan_id": 1,              "radius_config": {                "acct_interim_interval": 0,                "acct_servers": [                  {                    "host": "1.2.3.4",                    "keywrap_enabled": true,                    "keywrap_format": "hex",                    "keywrap_kek": "1122334455",                    "keywrap_mack": "1122334455",                    "port": 1813,                    "secret": "testing123"                  }                ],                "auth_servers": [                  {                    "host": "1.2.3.4",                    "keywrap_enabled": true,                    "keywrap_format": "hex",                    "keywrap_kek": "1122334455",                    "keywrap_mack": "1122334455",                    "port": 1812,                    "secret": "testing123"                  }                ],                "auth_servers_retries": 3,                "auth_servers_timeout": 5,                "coa_enabled": false,                "coa_port": 3799,                "network": "string",                "source_ip": "string"              },              "radsec": {                "enabled": true,                "idle_timeout": 60,                "mxcluster_ids": [                  "572586b7-f97b-a22b-526c-8b97a3f609c4"                ],                "proxy_hosts": [                  "mxedge1.local"                ],                "server_name": "radsec.abc.com",                "servers": [                  {                    "host": "1.1.1.1",                    "port": 1812                  }                ],                "use_mxedge": true,                "use_site_mxedge": false              },              "vlan_id": 9,              "vlan_ids": "1, 10, 50",              "wxtunnel_id": "7dae216d-7c98-a51b-e068-dd7d477b7216",              "wxtunnel_remote_id": "wifiguest"            }          }        }      ]    },    "wifi": {      "cisco_enabled": true,      "disable_11k": false,      "disable_radios_when_power_constrained": true,      "enable_arp_spoof": true,      "enable_shared_radio_scanning": false,      "enabled": true,      "locate_connected": false,      "locate_unconnected": false,      "mesh_allow_dfs": false,      "mesh_enable_crm": true,      "mesh_enabled": true,      "proxy_arp": false    }  }'
{  "ap_matching": {    "enabled": true,    "rules": [      {        "match_model": "string",        "name": "string",        "port_config": {          "eth1,eth2": {            "disabled": true,            "dynamic_vlan": {              "default_vlan_id": 999,              "enabled": true            },            "port_vlan_id": 1,            "vlan_id": 9,            "vlan_ids": "1, 10, 50"          }        }      }    ]  },  "created_time": 0,  "for_site": true,  "id": "497f6eca-6276-4993-bfeb-53cbbbba8f08",  "modified_time": 0,  "org_id": "a40f5d1f-d889-42e9-94ea-b9b33585fc6b",  "site_id": "72771e6a-6f5e-4de4-a5b9-1266c4197811",  "wifi": {    "cisco_enabled": true,    "disable_11k": false,    "disable_radios_when_power_constrained": true,    "enable_arp_spoof": true,    "enable_shared_radio_scanning": false,    "enabled": true,    "locate_connected": false,    "locate_unconnected": false,    "mesh_allow_dfs": false,    "mesh_enable_crm": true,    "mesh_enabled": true,    "proxy_arp": false  }}